The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x before 31.2 does not properly restrict toJSON calls, which allows remote attackers to bypass the Same Origin Policy via crafted API calls that access sensitive information within the JSON data of an alarm.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Dec 1, 2016 | Oct 15, 2014 |
| Freebsd | — | Upgrade libxulUpgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefox-esrUpgrade linux-firefox | Dec 10, 2025 | Oct 14, 2014 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox.Upgrade www-client/seamonkey.Upgrade mail-client/thunderbird.Upgrade dev-libs/nspr.Upgrade www-client/seamonkey-bin.Upgrade mail-client/thunderbird-bin. | Oct 30, 2017 | Oct 15, 2014 |
| Mfsa2014 82 | — | Upgrade to Mozilla Firefox ESR version 31.2Upgrade to Mozilla Firefox version 33.0Upgrade to the latest version of Mozilla Firefox | Oct 16, 2014 | Oct 14, 2014 |
| Oracle Solaris | — | Upgrade web/browser/firefox/multi-user-desktop to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/browser/firefox to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade web/data/firefox-bookmarks to version 31.6.0-0.175.2.11.0.3.0 on Solaris 11.2Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.3.0.0.28.0 on Solaris 11.3 | May 29, 2017 | Oct 15, 2014 |
| Oracle_linux | — | Upgrade xulrunner-develUpgrade firefoxUpgrade xulrunner | Oct 16, 2024 | Oct 15, 2014 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade mozillafirefox-branding-sleUpgrade libfreebl3-32bitUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade mozilla-nsprUpgrade libsoftokn3-x86Upgrade mozilla-nss-x86Upgrade libsoftokn3-32bitUpgrade mozilla-nss-develUpgrade mozilla-nss-32bitUpgrade libfreebl3-hmacUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translationsUpgrade mozilla-nspr-x86Upgrade MozillaFirefox-branding-SLEDUpgrade mozilla-nss-toolsUpgrade libfreebl3-hmac-32bitUpgrade libsoftokn3-hmacUpgrade libfreebl3Upgrade mozilla-nss-certs-32bitUpgrade libsoftokn3-hmac-32bitUpgrade libsoftokn3Upgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade libfreebl3-x86Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-certs | Dec 18, 2015 | Oct 15, 2014 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Oct 15, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub